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Abstract 

We present a multi-modal action logic with first-order modalities, which con- 
tain terms which can be unified with the terms inside the subsequent formulas and 
which can be quantified. This makes it possible to handle simultaneously time 
and states. We discuss applications of this language to action theory where it is 
possible to express many temporal aspects of actions, as for example, beginning, 
end, time points, delayed preconditions and results, duration and many others. We 
present tableaux rules for a decidable fragment of this logic. 

1 Introduction 

Most action theories consider actions being specified by their preconditions and their 
results. The temporal structure of an action system is then defined by the sequence 
of actions that occur A world is conceived as a graph of situations where every link 
from one node to the next node is considered as an action transition. This yields also a 
temporal structure of the action space, namely sequences of actions can be considered 
defining sequences of world states. The action occurs instantantly at one moment and 
its results are true at the "next" moment. 

However, the temporal structure of actions can be much more complex and com- 
plicated. 

• Actions may have a duration. 

• The results may be true before the action is completed or after it is finished. 

• Actions may have preconditions which have to have been true during some in- 
terval preceding the action occurrence. 

In order to represent complex temporal structures, underlying actions' occurrences, 
we have developed an action logic which allows to handle both states and time simul- 
tanuously. 

We want to be able to express, for instance that action a occurs at moment t if 
conditions pi, . . .pn have been true during the intervals ii, ... all preceding t. 



Here we present an approach where it is possible to represent actions in a complex 
temporal environment. In reality, actions have sometimes a beginning time, a duration, 
preconditions which may also have temporal aspects ; and the results may be true only 
instances after the end of the action performance. For an example, consider the action 
of calling an elevator, taking place at instance ti. Depending on the actual situation 
this action may cause the elevator to move only many instances later, to stop still later, 
an so on. The action of pressing the button of a traffic light, in order to get green light 
to traverse the street may result in a switch immediately or after some seconds and in 
another switch after some more minutes. 

In order to represent such issues, we define a modal action logic, where the modal- 
ities are terms containing variables which can be quantified. The same variables can 
occur inside the modalities as well as in the formulas after the modalities, allowing for 
unification between action term components and logical terms. This language makes it 
possible to express reasoning on states and the action terms allow to express temporal 
aspects of the actions. 

2 The first-order modal action logic Val 

The language of first-order action logic, C is an extension of the language of classical 
predicate logic, Cq. Cq consists of a set of variables x,y,xi,yi, . . .,asetF of function 
symbols F, where |F| G w is the arity of F, a set P of predicate symbols P, including 
T and ±, where \P\ e w is the arity of P, an equality symbol =, the logical symbols 
-1, A ,V. Terms and formulas are defined as usual and so are 3 and V. We denote by 
Vt the set of all terms of Cq. If is a formula and x a variable then we say that x is 
bounded in cj), when it occurs in a subformula 'ix(j>. x occurs free in cj) if it occurs in <j) 
and is not bounded in <j>. 

Action terms The language for action operators consists of 

• a set j4 of action symbols ai,a2, ■ ■ ■ where \a\ G is the arity of a and such that 

Ar]P = 9 

Action terms are built from action symbols and terms of Cq. 

• if a is an action symbol of arity n and ti, . . .tn are terms of Cq, then a{ti, . . .tn) 
is an action term. 

An action term is called grounded if no variable occurs free in it. The set of grounded 
action terms is denoted by At. 



Action operators If a and ai, a2, . . . a„ are action terms, then 

• [a] is an action operator 

• [oi ; 02 ; . . . a„] is an action operator 
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Modal operator □ is the standard modal operator ( S4 ) 
For n = 0, the corresponding action operator is noted [e] . 

An action operator is called grounded if all the action terms occurring in it are 
grounded. 

Example: [a], [a(ci, C2, C3)] are grounded, [a{x, C2,y)] is not grounded. 
Action formulas 

• If (/) is a first-order formula and [A] is an action operator, then [A](j> is an action 
formula. 

• If (/) is a first-order formula and □ is the modal operator, then is an action 
formula. 

• If is an action formula and x is a variable, then Vxcf) is an action formula. 

Instantiation If is a formula and t is a term, then (j>'f is the formula obtained from 
(j) by replacing every free occurrence of x by t. If t is the name of an element of a set 
O then <j>^ is called O-instance of (j>. 
Example: 

[a(x, c)](-0(c, x) V i;{xm^ = [a(ci, c)](-0(c, ci) V V(ci)) 
[ai;a2;a3{c,y)]P{c,y)y^ = [oi; 02; 03(0, C3)]P(c, C3) 

A formula is called grounded if there is no variable occurring free in it. 

2.1 Semantical Characterization of Val 

A Val structure is defined as a Kripke-type structure, such that the transition relation 
between worlds depends on grounded action terms. 

A Val structure is a tuple M = (W, {S^ ■ w e W}, A, R, r), where 

• yy is a set of worlds 

• for every w G W, 5^ = {O, J-wi'Pw) is a classical structure, where O is the set 
of individual objects (the same set in all worlds), is a set of functions over O 
and Vw is a set of predicates over O. 

• ^ is a set of action functions, for / G A / : W x x . . . x — > 2^, n e to. 

n 

Action functions will characterize the action operators (every action symbol of 
arity nin A will be associeted with an action function of arity n + 1). 

• RcyVxyyisa binary accessability relation on W, which will characterize 
the modal operater □. We will write R{w) = {w' : {w, w') e R}. 
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• T is a valuation, r = (tq, ti, T2, ra), where tq is a function assigning objects 
from O to terms. In order to speak about objects from O, we introduce into the 
language, for every o S O, an o-place function symbol (denoted equally o, for 
simplicity). 

Ti is a function assigning, for every world w G W, functions (from JF) to func- 
tion symbols (from F), of the same arity, 
Ti:W xT — > such that \ti{w,F)\ = \F\. 

T2 is a function assigning, for every world w £ W, predicates to predicate sym- 
bols of the same arities, 

T2 : W X P — >P, such that \t2{w,P)\ = \P\. 

T3 is a function assigning action functions to action symbols, 

T3 : A — > A, such that |T3(a)| = |a| + 1 

• T3{a){w, To(ii), . . . , To(i„)) C R{w). If a world can be reached from w by the 
execution of action a{ti, t2, ■ ■ ■ , tn) then it is accessible (via the relation R). 

To,Ti, T2 and T3 define the valuation r as follows: 

• If t2, ■ ■ • , ^m) is a term then 

To{w,F{ti,t2, ■ ■ -.tm)) = Ti{w,F){To{w,ti),To{w,t2), ■ ■ .,To{w,t^)). 

• if P is an n-ary predicate symbol and f 1 , ^2 , ■ • ■ , in are free object variables then 

t{w, Pti,t2, . . . , t„) = T iff (To(ti), . . . To{tn)) e T2{W, P) 

• T{w,ti = t2) = T iff r(w,ti) = T{w,t2) 

• t{w, = T iff t{w, (j)) — Jl 

• t{'w, (j) A V') = T iff r(w, 4>) = t{w, ^|:) = T 

• t{w, \/x4>) = T iff for every o E O t{w, ^o) = T 

• t(w, [a{ti,t2, ■ ■ . = T iff for every w' e T3{a){'w,To{ti), . . . ,ro(i„)), 
tK,0) = T 

• t{w, = T iff for every w' G R{w), t{w' , 0) = T 

Let ^ be a formula and xi, ^2, . . . , a;„ be the free object variables occurring in cj). 
Then T{s,(j)) = t iff for every tuple ti,t2, ■ ■ ■ ,tn of ground terms, 

A formula cj) is called valid in state w G W of a Val -structure A4 iff t{w, (j>) = T. 
This is denoted hy A4,w \= cj). We also say then that (f> is satisfiable. A formula (j> 
is called valid in a Val - structure Ai with the set of states W, iff cj) is valid in every 
w G W. We denote that by |= 0. A formula (j> is called Val - valid iff 4> is valid 
in every Val - structure. This is denoted by Hpa^ suppress the index Val , 

whenever it is clear from the context, in which system we are. 

Remark 1 [a]± is satisfiable and we have r(?i;, [a]_L) = ~^ W 
T3{a){w,To{ti), . . . ,To(i„)) = 
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2.2 Axioms and inference rules of Val 



In addition to the axioms and inference rules of classical first - order logic and those 
of the system K, which rule the action operators including [e], and those of the system 
and 54, which rule the operator □, we have the following axioms and inference rules, 
(where [A], [Ai] and [A2] are arbitrary action operators): 

[Al] [Ai; A2]a ^ [Ai][A2]a 

[A2] Oa [A]a 

[A3] [e]a^a 

[AA] \/xa for any individual term c of £ 

[A5] Va;[X]a ^ [XjVxo! for any modal operator X, with no occurrence of x 
[Rl] From a infer □« 

[R2] From a (3 infer a \/x(3 provided x has no free occurrence in a 

^Val defined as usual, such that l^p^; (p for any instance (j> of one of the 
axioms; and l^p^/ tp, whenever ip can be inferred from (f>, for any 0, such that l^pa^ 
by use of one of the inference rules. Again, we suppress the index Val , whenever it is 
clear from the context, in which system we are. 

2.3 Soundness, Completeness, Decidability 

The Val -logic is sound and complete: 

Theorem 1 l^p^; (f)ifandonlyif(j)isVal-valid(\='p^i (f>) 

The soundness proof is easy and the completeness proof goes along the lines of 
completeness proofs for modal logics by construction of a canonical model. The 
proof, which can be found in the appendix, bears several modifications according to 
the specific language which allows to quantify over terms occurring within modal 
operators. 

Val is a first order language and therefore undecidable in the general case. But for 
action logics, we will make use of decidable subsets of Val . 

Val is very close to term modal logic introduced by fTl. Term modal logic al- 
lows terms in general as modalities, whereas our action logic only admits action terms. 
Moreover Val contains the S4 modal operator □ which is not part of term modal logic. 



Using Val , we can modelize temporal aspects of dynamic actions. The modal logic 
allows to define action operators as modalities ISl fTTI . The first order logic is used to 
formulate actions at a more general level. Here, we show an example where in addition 
to the relative representation of time by the modal operators, it is possible to express 
time points by terms. 



3 Temporal Action Theories 



5 



We presuppose a time axis, linearly ordered (dense or continuous or discrete). 
Given a Val -structure, we will define a transitive relation on the set of states, W, 
which will be related to the order on T. 

Definition 1 Let M ~ (W, {Sw ■ w G W}, A, R, (tq, n, '''2, T3)) , be a Val -model. 
Then w -<o w' iff 3a G A of arity n and there are terms ti, . . . , i„, such that w' €E 
/(w, ii, . . . , tn). Let be < the reflexive and transitive closure of ~<o- 

Intuitively, this means that w ^ w' if we can possibly "reach" w' from w by 
performing actions ai, 02, . . . , a„. Obviously, < is transitive and reflexive. Since we 
want to "link" worlds of W to time points in T, which is ordered, -< must also be an- 
tisymmetric. The temporal entrenchment of the states is defined by a homomorphism 
time : W — > T from W into T, where w < w' implies time{w) < time{w'). 
Using this construction, actions operators can be defined admitting complex temporal 
structures, including beginning and ending instances and a duration, which can be 0, 
when the result is immediate, or A G T. The preconditions and results of actions can 
be defined to occur at freely determinable time instances before or after the instance 
when the action occurs. When an action a occurs in the state w, time{w) gives us the 
time point at which a occurs. If the duration of the action is A, the time point of the 
resulting state w' is time{w') ~ time{w) + A. 

In this particular framework, we define 

• Action terms as binary action predicates a{t, d, it), where t denotes the instance 
on which a occurs and d denotes the duration of a, i.e. the interval on T after 
which the results of a will hold. , Ht is the sequence of other variables denoting 
the other entities or objects involved in the action occurrence. 

To give an example, let T = {!,..., 24} be discrete and finite, denoting the 
hours during one day. Then action move{t, 3, TGV, Marseille, Paris) is the 
action "train TGV goes from Marseille to Paris, the duration being 3 hours". 

• Action axioms. An action axiom is characterized by a precondition TT{t,~x') and a 
result p{t + d, "af ), where tt and p are Val formulas describing aU preconditions 
and results of action a. 

To continue the previous example, the action execution axiom 
of the move-action is at{t,x,y) [move{t,d,x,y, z)]at{t + 

d,x,z) (and can be instantiated to at{6, TGV, Marseille) 
[move{6,3,TGV, Alarseille, Paris)]at{9,TGV, Paris)), which means: 
if X is at y at instance t, then, after moving from ytoz,x is at z at instance t + d. 

The general form of an action law is 

7r(ii,xi) [a{t,d,X2)]p{t2,X3), where ^ U X2 C X3 
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4 Example 



The following example is due to Lewis JS] and has been discussed by Halpern and 
Pearl in p| in the framework of a theory of causation. Interestingly, this example 
defines actions with a complex temporal structure. 

Billy and Suzanne throw rocks at a bottle. Suzanne throws first and her rock arrives 
first. The bottle shatters. When Billy's rock gets to where the bottle used to be, there is 
nothing there butfiying shards of glass. Without Suzanne 's throw, the impact of Billy 's 
rock on the intact bottle would have been one of the final steps in the causal chain from 
Billy's throw to the shattering of the bottle. But, thanks to Suzanne's preempting throw, 
that impact never happens. 

In our formulation, we focalize on the temporal structure of the throw action. We 
consider that the action occurs along a continuous (or dense) time axis, [0, oo[. We 
define one action term for "throw", T, and two predicates H for "hits" and BB for 
"the bottle is broken". The action term T{t, d, p) means that "person p throws a stone 
to a bottle at instance t and the result of the action (the stone hits its target) occurs at 
instance t + d". The formula H{t,p) means that "the stone thrown by person p hits 
the bottle at instance t and formula BB{t) means that the bottle is broken at instance t. 
The intended result of the action is to hit the bottle, but this result can only be achieved 
if the bottle is still at the intended place and nothing else has been happened to it, 
namely if it is not broken in the meantime. In this example it is not enough to have the 
precondition that the bottle is there and not broken at the instance of throwing, but it 
must be non-broken at the moment when the action is to be completed, just before it 
is to be hit. Therefore the action law for "throw" has a precondition which must hold 
after the instance when the action occurs. 

Example 1 The following set of laws represents the framework of this story: 

(1) -nBB{t + d)^ [T{t, d,p)]H{t + d,p) 

(2) n{H{t,p) ^ BB{t + di)) 

(3) a{BB{t) yt'{t <t' ^ BB(t'))) 

(4) -nBB{0) 

(1) is the action law for successful execution of the throw action, (2) describes the 
impact of hitting the bottle (di is infinitesimaUy small) and the general law (3) says 
that a broken bottle remains broken "forever"^ 

Several scenarios can happen within this framework. Here we discuss the scenario 
where Suzanne throws at instance and Billy throws some instance lateJl 

(5) <T{0,ds,suzy)>T 

(6) <T{ti,db, billy) >T 

'in this example we focus on the temporal relations between the different instances of throwing (by 
Suzanne and by Billy), so we neglected other preconditions, as for example having a stone, heavy enough, 
but not too heavy, having members enabling the person to thi'ow, seeing the object to aim, etc. The throw 
action defined here is highly abstracted for the purpose of our temporal action theory. 

-In order to express that action aoccurs, we write [a]T, which simply means that action a occurs (even 
when nothing can be said about its results). It is always possible to throw a stone at a bottle, even if the 
intended result of hitting cannot be achieved. 
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We need these "empty results", because 

Three cases can then be distinguished: 

1 . The moment when the bottle can be hit (and broken) after Suzanne's throw {dg + 
di) occurs before Billy's stone could possibly hit the bottle ti + di,. 

(7) ds+di<ti+ db 

(8) a{BB{ds + di) BB{ti + db)) from (3) and (7) 

(9) by persistency from (4)_^ 

(10) [T(0, ds,suzy)]H{d,„ suzy) from (1) and (9) 

(11) [T(0, ds,suzy)]BB{ds + di) from (2), (10), K for the action modality and (A2) 

(12) [T(0, ds,suzy)]BB{ti + db) from (11), (8), K and (A2) 

In this scenario, the law -^BB{ti + db) [T{ti,db,billy)]H{ti + db, billy) 
cannot be used to derive T{ti, db, billy)]H{ti + db, billy) because BB{ti + db) 
holds after Suzanne's throw (12). Billy's stone cannot hit the bottle, because it 
is already broken when his stone could hit it and we have just [T{ti,db,billy)]T 
((6), Billy has thrown). 

2. Billy's stone hits the bottle, which breaks, before Suzanne's stone could possibly 
hit the botde. 

(13) h+db + di < ds 

(14) D{BB{ti +db + di) ^ BB{ds)) from (3) and (13) 

(15) -^BB{ti + db) by persistency from (4), see (9) 

(16) [T{ti,db, billy)]H{ti + db, billy) from (1) and (15) 

(17) [T{h,db, billy)]BB{ti + 4 + ^i) from (2), (16), K and (A2) 

(18) [Titi,db, billy)]BB\ds) from (14), (17), K and (A2) 

Here, Suzanne's stone, which could hit the bottle at instance ds, will not hit it 
since we have BB{ds) and therefore the precondition ^BB(ds) is not more true. 
The law □(^i?i3(ds) — > [T(0, ds, su2?;)]i7(o?s, suzy)) cannot be used to derive 
[r(0, ds, suzy)]H{ds, suzy) because BB{ti+db + di) holds after Billy's throw 
(17). All we have is [r(0, ds, suzy)]T (Suzanne throws). 

3. Suzanne's and Billy's stone hit the bottle precisely at the same moment. 

(19) ti+db = ds 

(20) ^BB{ti + db) A ^BB{ds) by persistency from (4), see (9) 

(21) [T(0, ds, 3uzy)]H{ds, suzy) like (10) 

(22) [Titi,db, billy)]H{ti + db, billy) as (16) 

(23) [T(0, ds, suzy)]BB{ds + di) from (21) 

(24) [T{ti,db, billy)]BB{ti + dsb + di) from (22)) 

In this case, both stones hit the bottle which breaks as a result of Suzanne's throw 
and Billy's throw. 
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5 Conclusion and Related Work 



Modal logic approaches to action theories define a space of states but cannot handle 
time, neither explicitly not implicitly l2l|6l. In situation calculus |l9l|7] reasoning about 
time was not foreseen, properties change discretely and actions do not have durations. 
Remember that in situation calculus, there is a starting state, sq and for any action a 
and state s, do{a, s) is a resulting state of s. One can consider that the set of states is 
given by {s : 3ai . . . a„s = (io(a„, do(a„_i, . . . do{ai, sq)))}. Hence the temporal 
structure of situation calculus is discrete and branching and does not allow for actions 
of different duration neither for preconditions or results which become true during the 
action execution or later after the action is ended. 

Javier Pinto has extended situation calculus in order to integrate time (Sj. He 
conserves the framework of situation calculus and introduces a notion of time. In- 
tuitively, every situation s has a starting time and an ending time, where end{s, a) ~ 
start{do{a, s)) meaning that situation s ends when the succeeding situation do{a, s) is 
reached. The end of the situation s is the same time point as the beginning of the next 
situation resulting from the occurrence of action a in s. The obvious asymmetry of the 
start and end functions is due to the fact that the situation space has the form of a tree 
whose root is the beginning state sq. Thus, every state has a unique preceding state but 
eventually more that one succeeding state. 

Paolo Tereziani proposes in lfT2l a system that can handle temporal constraints 
between events and temporal constraints between instances of events. 

In this present article, we have introduced a new modal logic formalism which can 
handle simultaneously states and time. We did not address here the problem of the 
persistency of facts over time (or over the execution of actions), because we wanted to 
focus on the modal temporal formalism. We have adopted a solution similar to the one 
presented in ifTTll . i.e. "weak" frame laws are nonmonotonicaUy added to the theory. 
But this solution is a bit more complicated in the case of our first-order action logic 
presented in this paper, because we need to restrict ourselves to a decidable subset of 
Val . 

Concerning the implementation, we use a labelled analytic tableaux approach in- 
cluding an abductive mechanism for the weak persistency laws, which will be described 
in more detail in a following paper. 

We will apply this formalism to planning problems where a hybrid approach (states 
and time) can be very powerful. The idea is to infer temporal constraints from a 
Val specification in order to create a plan for a problem 
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A Appendix: Proofs of the theorems 
A.l Soundness and Completeness 

Soundness is easy and left tyo the reader. For completeness, in this part we will show 
that every Val - valid formula is a theorem of T>al . Our proof is along the same lines 
as lITOl . Subsequently, formulas are always grounded. 

Definition 2 A set of formulas, s, is called Dal -inconsistent if it contains a finite sub- 
set {(pi, 4>2, ■ ■ ■ , P'k} with I~2?q; ~^4'i V ... V -^(pk- Otherwise s is called Val - consis- 
tent ( or consistent). 
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Let s be a set of formulas. Then we denote by Vt{s) the set of all terms occurring 
in formulas of s. We denote by P{s) the set of all T>al - formulas containing only 
nonlogical symbols (terms, action terms and predicate symbols) of formulas of s. 

Definition 3 A set of formulas s is called complete ( or Val - complete) if 

1. s is consistent. 

2. s is maximal, i.e. for all (j) in P{s) holds: if (j) ^ s then s U {</>} is inconsistent. 

3. s is saturated, i.e. for every existential formula 3x(f> G s where x is a variable, 
there is a formula (j)^ G sfor some constant c 6 Vt {s). 

Lemma 1 Every consistent set of formulas can be extended to a complete set of for- 
mulas. 

Proof Let s be a consistent set of formulas and let ci, C2, ... be a sequence of 'new' 
object variables not in Vt{s). We define P*{s) = P{s) U {V' : "0 a formula with 
variables from ci, C2 . . .}. Let {3xi(j)i{xi)}i=i_,,, be an enumeration o/all existential 
formulas ofP*(s). Then we form a new set of formulas s~, by adding to s all formulas 
3xi(j)i{xi) — > 4>{ai), i = 1,2, . . .for every existential formula of P{s). It is easy to see 
that is consistent. 

s~ is extended to a complete (maximal) set of formulas s* as follows: Let & ~ {s' : 
s C s' and s' consistent}. Let H be a chain in Q, i.e. H C Q and if si, S2 G H then 
Si C S2 or S2 C Si. Then IJ H is an upper bound of H in Q, since s C IJ H for all 
s £ H. It is easy to see that [J H is consistent. Therefore [J H E Q and, by Zorn 's 
Lemma, then has a maximal element, s*. It is easy to see that s* is complete. 
Q.E.D. 

The following properties of complete sets are straightforward. 
Lemma 2 Let s be a complete set of formulas. Then 

1. (f> £ s if and only if -'<p ^ s 

2. If (f) € s and ip (E P{s) and ^Dq^i (j) —>■ ip then ip G s 

3. IfU(j)Es then [a](j) G s 

4. If (j) V ijj £ s then (j) G s or ip £ s 

5. If (f)\/ ip E P{s) and (f) E s or G s then V ■0 £ s 

6. If c G Vt{s), then (jr^ G s if and only if3x(j) G s 

7. t ~ t E sfor any term t G Vt{s) 

8. Ift = t' e s then t' = t e s 

9. Ift = t'e s and t' = t" G s then t ^ t" e s 
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The last three items show that t = t' E s defines an equivalence relation over 
Vt(s), where t t' iff t = t' £ s. The equivalence class oft according to ~s is 
denoted by [t\s. 

Definition 4 Let s be a set of formulas and a G At. Then we define 

1. = : [a]4, e s] 

2. s° ={(/):□(/) e s} 

Lenuna 3 1. is inconsistent iff [a]_L S s 
2. s° C 

Lenuna 4 Let s be a complete set of formulas and (j) a formula such that s° U {(j)} is 
consistent. Let s' — (s" U {0})* the complete extension of s"^ U {0} (which exists by 
lemmaU}. Then Vt{s) = Vt{s') Proof Since s is complete, it is saturated, hence for 
every existential formula 3x(j) £ s there is a formula (j)^ ^ g s for some c G Vt{s). The 
crucial point concerns existential formulas in s° not in s. But for those formulas we 
have that OBxcf) £ s and therefore 3x(f) £ s", by T. Hence existential formulas in s'^ 
are also existential formulas in s. But this means that all terms in s' are terma in s. 
Q.E.D. 

Definition 5 A set S of sets of formulas is called complete ;/ 
L Every element s of S is a complete set of formulas. 

2. For all s E S and (p G P{s), if s°' U {((>} is consistent, then there is s' E S such that 

s" U C s' 

Remark 2 // [a]_L E s, then, since s° is not consistent, it is and not contained in any 
s' eS. 

Now we construct the canonical model starting from a complete set of formulas, s. 

Lenuna 5 For every complete set of formulas s, there is a Val -structure 
M = (W, {Su, : w E yy}, A, R, (to, ti, T2, ts)) , such that s eW. 
Proof: 

For every (j) E P{s) and every a E At such that s° U {</)} is consistent, we extend 
s° U {(/)} to a complete set of formulas s', which exists by lemma |7] So we form 
successively sets of formula sets So, Si,. . . as follows 
So := {s} 

Si+i := {X . X is a complete extension ofV^ U {(/)} where Y E Si and (f> E P{s) 
and Y" U {(j)} is consistent} 
W U{^* -.lELu}. 

Because of remark^ Vt{s) = Vt{s')for s, s' E W. We note Vt{s) = Vt, [t]s = [t] 
and 

For every w E W, S^, = (O, J'w, Pw) is a classical structure where the object set 
O is defined as the set of ^-equivalence classes over Vt. 
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. 0=def{[t] -.teVt} 

• For every t G O, tq{w, t) = [t] 

• for every n-ary function symbol F ^ F and for every tuple of terms fi, . . . i„ S 
Vt,n[w,F){[h],...[t,,]) = [F{h,...t^)] 

• Vw is the set of predicates P"', where for every predicate symbol P of 
arity n = \P\, is the predicate defined by (Ti(ti), . . . ri(i„)) S 
P"" ifandonlyifP[ti,...tn) e w. WesetT2{w,P) = P"" 

• A is the set of action functions a. For every action symbol a of arity \a\ = 
TO, and terms ii, t2, . . . , tm, a(w, ti,t2, ■ ■ ■ ,tm) ^ W is defined by w' € 
a{w,ti,t2, ■ ■ ■ ,tm) if and only if w"'^^^'^^' ' ■ ' '*™) C w' 

• We set T3(a) = a 
Q.E.D. 

We show that is a T>al -structure. By the construction, W is a complete set of 
sets. 

Lemma 6 r3(a)(w, To(ii), . . . , ro(<„)) ^ R{w). Let be w' g 

T3(a)(w, To(ti), . . . , To(i„)). Then ly^l^i' ^2, • • ■ , ^m) c w' by construction of 
the model. But then uP C w' by lemma\3\ from which follows that w' G R{w). 

Truth value t{w, (f>) for formula <f> and world w is defined by induction over the 
construction of formulas as usual. 

In order to show that t(s, (p) ~ t if and only if G s, we need the following 
lemma: 

Lemma 7 Let M = (W, {S^ ■ w G W}, A, R, (tq, n, T3)) be the Val -structure 
constructed from a complete formula set w according to lemma\5\and w G W. 
Then for every action symbol a of arity n, [a]0 G w if and only if 
for every tuple of terms ti, t2, . . . , tn and w' G W , if w' G T^{a){w, ti,t2, ■ ■ ■ ,tn, 
then (j) G w'. 
Proof 

If (j) is _L then this lemma trivially holds because then T3(a){w, ti,t2, ■ ■ ■ ,tn is empty. 
Let 4> be different from false. 

(=>)." if [a\<j) G w then (j) G w"' and therefore for every w' G a(w,ti,t2, ■ ■ ■ ,tn), 
(j) £ w' by the definition of Ai . 

(<=).• Let be \a\ = n. Consider w"". We first show that w"" U is inconsistent. 

Assume for the contrary, that w"' U is consistent. Since W is a complete set of 

formula sets, according to definition^ there is w' G W and w"" U {^0} C w'. From 
this follows w"' C w', hence w' G a{w,t{\a\^, |a|2, . . . , by the constuction of 
A4 in lemma |5] Since ->(/) G w' and w' is complete, (p ^ w', which contradicts the 
hypothesis. 

Therefore, w"" U is inconsistent. Therefore there exist formulas 
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^1 , ^2 , • ■ • , 0fc S w° such that h 0i A . . . A 0fe — > (pfrom which h [a]((f>i A . . . A (pk) 
[a]4i by rule 1 of the logic "Dal and therefore h [a] 0i A ... A [a]0fc — > [a\(j). But 
[a\4>ij \o\4>2i • ■ • , [i]0fc G w, and therefore [a\(j) S w, by the lemma^ 2. Q.E.D. 

The next lemma concludes our proof. 
Lemma 8 For every closed formula (j) £ P{s), 

t{w, (j)) =: t if and only if (j) G w 
The proof is straightforward, by induction over formulas using the lemmata\2\and^ 

Proof of the completeness theorem: 

Proof Assume for the contrary that there is a Val valid formula (f> which is not de- 
ducible in Val . Then {-'(f)} is a consistent set of formulas, which can be extended 
to a complete set of formulae s, by Lemma [T] where -10 G s. By Lemma |5] there is 
a Val -structure M = (W, {Sw ■ w G W}, A, R, (tq, n, T2, T3)) where W is a com- 
plete system of sets and s G W . By Lemma[8] r(s, -^(j)) = t and hence T(s, 4>) = f, 
which contradicts the validity of (f>. Q.E.D. 
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